Cyberattack hits four major Iranian banks, officials say

Published: 14 June 2026

Anna Zhadan
Contributor

Iran cyberattack — Image via Shutterstock

A limited cyberattack disrupted services at four major Iranian banks, but officials said customer data was not accessed or deleted.
Technical teams secured the affected systems and continued recovery work, with local media reporting that transactions had returned to normal later on Sunday.
The hacker group Black Wolves claimed responsibility, while officials said the full details of the incident are still under investigation.

Key Takeaways by nexos.ai, reviewed by Cybernews staff.

A cyberattack disrupted operations at four major Iranian banks, but protective measures were immediately implemented to protect customer data, Iran's Bank Coordination Council announced on Sunday.

The council described a "limited cyberattack" that affected services at Bank Melli, Bank Tejarat, Bank Saderat, and the Export Development Bank of Iran.

Tehran residents reported that electronic payments had abruptly stopped working across supermarkets and restaurants, forcing businesses to resort to manual recording of purchases.

The attack targeted their shared communications infrastructure. Technical teams secured the affected systems after noticing unusual activity.

"Technical teams immediately implemented the necessary preventive and protective measures to protect customer data and the country's banking infrastructure after identifying unusual signs," the council said in a statement.

According to officials, no customer data was accessed or deleted, with the incident limited to the shared communication infrastructure.

"Detailed technical investigations indicate that this disruption was caused by a limited cyberattack on the shared communication infrastructure of these four banks, and fortunately, no unauthorized access to customer information occurred and no information was deleted," the council said.

According to the council, technical teams have secured the infrastructure and are continuing recovery efforts to restore full operations. Transactions are reportedly functioning as normal now, with issues at Tejarat and Export banks resolved later on Sunday, according to local media.

Details are still being investigated.

The Iranian hacker group Black Wolves claimed responsibility for the attack on Saturday, writing on Telegram: "A silent war is unfolding, and Iran is under cyberattack."

In recent years, Iran has faced a series of high-profile cyberattacks. In 2021, hackers breached Tehran's Evin Prison, leaking surveillance footage that appeared to show guards assaulting political prisoners. And during the 2022 women’s protests, hackers targeted the Iranian Central Bank.